Privacy Policy

Written 25 August 2026 · Last changed 25 August 2026

Who is responsible for it

I work alone. There is no company behind this site, no staff, no agency and no marketing department. When you write to this address, I am the person who reads it.

This policy covers this website and the messages that reach me through it. It is written under the EU General Data Protection Regulation and Spanish data protection law, and the supervisory authority for Spain is the Agencia Espanola de Proteccion de Datos.

The contact form

The form on the contact page asks for four things, and it sends them to me as an email. Nothing is stored in a database, because there is no database.

What you type

• Your name. So I know who I am writing back to.
• Your email address. So I can write back at all. It is the only way the form has of reaching you.
• Which service you are thinking about, if you choose one. It is optional, and "not sure yet" is one of the answers.
• Your message. Whatever you decide to tell me.

What the form records without asking

Two things, and both exist only to keep the form from being used by spam software:

• The time the page was opened. A message submitted less than three seconds after the page loaded was not typed by a person, and is refused.
• A one-way hash of your IP address, held in a temporary file so that the same address cannot send more than one message a minute. It is a hash, not the address itself, and it cannot be turned back into one. It is not attached to your message and it is not kept.

There is also a field on the form labelled "Website" that you will never see, because it is hidden. It is there for automated software, which fills in every field it finds. If it has anything in it, the message is quietly discarded. If you are using a screen reader or an unusual browser and can see that field, please leave it empty.

Why I am allowed to hold it

Because you asked me to. Under the GDPR the basis is your consent, given by writing to me, and the steps taken at your request before providing a service. You can withdraw it at any time and I will delete what I have.

How long I keep it

There is no fixed period, and I am not going to invent one. An enquiry stays in my inbox for as long as it is useful to have it there — people write, disappear for a season and come back, and it is better for both of us if I still know who you are. I do not copy it anywhere else. There is no archive, no backup system of my own and no other place it exists.

You do not have to wait for me to decide. Ask me to delete your messages and I delete them — whenever you ask, without needing a reason, and without being asked why.

Email, phone and WhatsApp

If you write to me directly instead of using the form, the same thing is true of the message: it sits in my inbox, it is read by me, and it is deleted on request.

WhatsApp is not mine. It belongs to Meta, and a message you send me there passes through their systems under their terms and their privacy policy, not mine. I have no control over what they do with it and I cannot delete it from their side. If that matters to you, the email address above and the telephone number are ordinary and unremarkable, and either is fine.

Something worth saying plainly

This is a massage and coaching practice for men, and the fact that you have written to it says something about you that you might not want written down anywhere. I take that seriously, and it is the reason this site is built the way it is: nothing that tracks you, nothing that follows you to another website, and no advertising network anywhere near it.

Some people tell me about an injury, a difficulty or something they are working through, because it helps me know what a session should be. You are not required to. Tell me what you want me to know and nothing more. Whatever you do tell me stays between us, in the same way anything said in the room does, and it is held for the same reason and for the same length of time as the rest of the message.

I do not keep records about clients. There is no case file, no notes, no history of who came and when — not on paper, not on a phone, not anywhere. What you told me before a session exists only in the message you sent me. What is said during one is not written down at all.

I do not keep a mailing list either. You will not be added to one, and nothing you write to me will ever be used to sell you something later.

How visits are counted

This site counts visits with Plausible, a small analytics tool whose servers are in Germany. It sets no cookie, stores nothing on your device, and does not follow you to any other website.

What it records is a count, not a person: the page opened, the website or search that sent you, the country, and whether the screen is a phone or a computer. It does not record your IP address, it does not build a profile, and there is no identifier that would let anyone recognise you on a second visit. I can see that eleven people read the treatments page yesterday. I cannot see who they were, and neither can Plausible.

Why it is here at all: this is a one-person studio with no online booking, so without a count I have no way of knowing whether a page is doing its job or whether people are leaving at a particular point. That is the whole use. It is not used for advertising and the data is not sold, shared or sent to anyone else.

What is not here: no Google Analytics, no advertising pixel, no tag manager, no heatmaps and no session recording. Nothing on this site watches your mouse, records your screen or reads what you type.

The typefaces are stored on this server rather than loaded from Google's font service, so opening the page does not tell Google that you did. The map on the contact page is a picture, not an embedded map, for the same reason — there is no third-party map loading in the background and setting cookies. When you press "open directions", you leave this site and Google's own terms apply from that point.

Links to WhatsApp and to the Travel Gay listing behave the same way: they take you somewhere else, and what happens there is between you and them.

Cookies

None. This site does not set a cookie of any kind, first-party or third-party, necessary or otherwise — and that includes the analytics described above, which is the reason that tool was chosen over the usual one. That is why there is no cookie banner: not because one was skipped, but because there is nothing on your device to ask you about.

The server

The site is hosted by InMotion Hosting. Like every web server in the world, it keeps an access log: the IP address that made a request, the time, the page, and the browser that asked for it. These logs are automatic, they are used to keep the site running and to see when something is attacking it, and they are deleted on the host's own schedule. I do not read them for any other purpose and they are not combined with anything else.

The hosting company processes this on my behalf under a contract. Nobody else does.

Who else sees your information

Almost nobody. There is no customer database, no booking platform, no newsletter tool and no advertising partner. Your message goes to my email and stops there.

The one company involved in anything beyond that is Plausible, which counts visits as described above and holds no information capable of identifying you. It processes that count on my behalf, on servers inside the European Union.

The only exception is the one nobody can avoid: my hosting provider and my email provider carry the message in the course of delivering it, and a lawful order from a court or an authority would have to be obeyed.

What you can ask me to do

The GDPR gives you rights over information about you, and on a site this small most of them are answered by a single email:

• See it — ask what I hold and I will send you a copy.
• Correct it — if something is wrong, I will fix it.
• Delete it — ask, and it goes.
• Take it elsewhere — ask, and you get it in a form you can use.
• Object, or ask me to stop — at any point, without giving a reason.

Write to info@grancanariagaymassage.com. I answer everything myself, usually the same day, and I will not ask you to prove who you are beyond enough to be sure I am not sending your messages to somebody else.

If you are not happy with how I have handled it, you can complain to the Spanish data protection authority, the Agencia Espanola de Proteccion de Datos, at www.aepd.es. You can also complain to the authority in the country you live in.

Adults only

This service is for adults. The site is not aimed at anyone under eighteen and I do not knowingly hold information about anyone under eighteen. If you believe I have, tell me and it will be deleted.

If this page changes

Any change is made here, and the "last changed" date at the top moves with it. There is no mailing list to notify, so if this matters to you, the date is the thing to check.

If you have read this far and something is still unclear, ask me. It is a fair question and it gets a straight answer.